I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program.

Within Outlook Web Access, is there a way to tell whether or not an email was spoofed? For example, if I receive an email from "boss@company.com", how can I be sure that the email is from "company.com" and not spoofed?

There is an option in Outlook to direct all messages from outside the organization to the junk folder, but I found that this feature is not reliable. Spoofed messages still get through.

  • Is looking at the email-headers an option? – Vipul Nair Jul 1 '19 at 18:13
  • @VipulNair yes, if it is possible to do so in Outlook. However, I don't think there is a way to do that without opening the email first (which poses a security risk). – Sam Smith Jul 1 '19 at 19:04
  • How did you come to that conclusion that opening a mail is a security risk? – Vipul Nair Jul 1 '19 at 19:42
  • @VipulNair Email may contain an image or other link that gets fetched by outlook when opening the email and this gives information to the attacker. AFAICT there is no way to access the email headers without opening the email first in outlook online. – Giacomo Alzetta Jul 2 '19 at 12:08
  • @GiacomoAlzetta what kind of information? – Vipul Nair Jul 2 '19 at 12:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.